Privacy Policy

This page has one job: you tell us which city OVERDRIVE should come to, and we let you know when that stop goes live. This policy explains what we do with the data you give us, and what we don’t.

1. Controller

The controller responsible for data processing on this website is:

Company

TOB Agency GmbH

Address

Marienbaderstr. 14
30559 Hannover
Germany

Represented by

Max Tobschall

Email

kundenservice@tob-agency.de

2. What this website does not do

This website does not set any cookies of its own, uses no analytics, no advertising networks, no social media plugins, and loads no external fonts or scripts from third parties. Everything you see is served from our own server. See section 6 for the one planned exception.

3. Hosting and server log files

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Each time the site is accessed, the web server automatically records:

• your IP address
• the date and time of the request
• the page requested and the amount of data transferred
• the browser type and version, and the operating system
• the referring page, where your browser sends one

This data is required to deliver the site and to keep it secure and stable. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in the secure and reliable operation of our website. Log files are deleted no later than 30 days after collection. This data is not merged with other data sources and is not used to identify you personally.

4. Registering your city

When you register on this page, we process the following data:

• the city you selected, and the country it belongs to
• your email address
• how many tickets you said you would probably buy
• the date and time of your registration

Why we process it

• To tell you when your city goes live. This is a newsletter for the city you chose. The legal basis is your consent under Art. 6 (1) (a) GDPR, which you give by ticking the consent box before submitting the form.
• To plan the tour. We use the number of registrations and the expected ticket demand per city to decide where OVERDRIVE stops and how large each event needs to be. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in planning our own events. For this purpose the figures are only ever evaluated in aggregate, never per individual person.

Proof of your consent

So that we can demonstrate that consent was actually given, as we are required to under Art. 7 (1) GDPR, the following is recorded along with your registration: the date and time, your IP address and the identifier your browser sends about itself (the user agent). This is only ever used as evidence of consent, never to analyse your behaviour, and it is deleted together with your registration.

Where it is stored

Your registration is stored in two places, both of them in Germany:

• in Clubinio, the ticketing and newsletter system we use to send the announcement for your city. Clubinio is operated by living the goodlife GmbH, Siemensstraße 24, 30916 Isernhagen, Germany, which processes your data on our behalf and solely on our instructions. Data protection contact: datenschutz@clubinio.de.
• on our own server at Hetzner, as a backup and as the basis for the tour planning described above

We do not sell your data, and we do not pass it on to anyone for their own purposes.

How long we keep it

We keep your email address until you withdraw your consent — there is an unsubscribe link in every email we send, and you can also simply write to us. After withdrawal we delete your address without undue delay. The aggregate demand figures for a city are kept for the duration of the tour planning and for no longer than 24 months after your registration.

Withdrawing your consent

You can withdraw your consent at any time with effect for the future, either via the unsubscribe link in any of our emails or by writing to kundenservice@tob-agency.de. Withdrawing does not affect the lawfulness of the processing carried out before the withdrawal.

5. Contacting us by email

If you write to us, we process your email address and the content of your message in order to answer it. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in answering enquiries, and, where your message relates to a contract, Art. 6 (1) (b) GDPR. We delete these messages once they are no longer needed, at the latest after three months, unless statutory retention periods apply.

6. Meta Pixel — not active yet

The Meta Pixel is not currently in use on this website. We plan to use it in future to measure the success of our advertising on Facebook and Instagram. This section describes what will happen once it is switched on.

The Meta Pixel is a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. It allows us to see whether a visit to this site followed one of our ads, and whether a registration resulted from it. In doing so, your IP address and information about your behaviour on this page are transmitted to Meta and may be matched against your Facebook or Instagram account.

The pixel will only ever load after you have actively agreed to it in a consent banner. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw that consent at any time with effect for the future through the cookie settings on this site. Without your consent, nothing is transmitted to Meta.

Data may be transferred to Meta Platforms, Inc. in the USA. Meta relies on the EU–US Data Privacy Framework and on the EU standard contractual clauses for this. Despite these safeguards, it cannot be ruled out that US authorities gain access to the transmitted data.

7. Your rights

You have the following rights regarding your personal data:

• Access — to ask what data we hold about you (Art. 15 GDPR)
• Rectification — to have inaccurate data corrected (Art. 16 GDPR)
• Erasure — to have your data deleted (Art. 17 GDPR)
• Restriction — to have processing restricted (Art. 18 GDPR)
• Data portability — to receive your data in a machine-readable format (Art. 20 GDPR)
• Objection — to object to processing based on our legitimate interests (Art. 21 GDPR)
• Withdrawal of consent — at any time, with effect for the future (Art. 7 (3) GDPR)

To exercise any of these rights, write to kundenservice@tob-agency.de.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

8. Encryption

This site uses TLS encryption for all connections. You can tell it is active by the https:// in the address bar and the lock icon in your browser. While encryption is active, the data you submit cannot be read by third parties.

9. Changes to this policy

We will update this policy when the website changes — for example when the Meta Pixel described in section 6 goes live. The date at the top of this page always shows the current version.